CVE-2026-39828
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.
- Published May 22, 2026
- CVSS 6.3 medium
- 0.5% chance of exploitation in the next 30 days (EPSS)
- A fix is available